CONTINUOUS INTERNET TELEMETRY24H DRIFT2,434 material changesacross 1,963 domains · last 24h · -7,981 vs yesterdayDNS DRIFT116 domains changed DNS providertop destination cloudflare.com · -543 vs yesterdayEMAIL DRIFT13 domains switched email providertop destination google.com · -154 vs yesterdayCERT DRIFT21 domains switched issuing CA24h · -198 vs yesterdayNOW398 curated domains not reachable-305 vs yesterdaySITE ERRORS17,562 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 100,670 sites429 rate-limit / 403 bot-block, a posture signal

al.to

Observed Jul 24, 2026, 09:23 UTC (11h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onCloudflare
Email byMicrosoft 365
Secured byGoogle Trust Services
Also usesFacebook/MetaGoogle Search Console
IPv6 · tranco
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat al.to actually stands on - every host below is a signed observation
al.to
A / AAAA
104.20.41.135172.66.154.2072606:4700:10::6814:29872606:4700:10::ac42:9acf
Cloudflareserves the site
NS
alice.ns.cloudflare.commatt.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
al-to.mail.protection.outlook.commx.al.toexmail.al.to
Microsoft 365receives its email
TLS
al.to
Google Trust Servicesissued its certificate

DNS Records

A 2

  • 104.20.41.135
  • 172.66.154.207

AAAA 2

  • 2606:4700:10::6814:2987
  • 2606:4700:10::ac42:9acf

MX 3

  • 10al-to.mail.protection.outlook.com
  • 15mx.al.to
  • 20exmail.al.to

TXT 11

  • 54f69abfcbef956527573229f01cc1916273baac6d6ed9438febb016dca0eec2
  • 59b34ef4ec377ef9bb767da3738c07255e511b6cd0c42329d98e18c015e442f3
  • MS=ms63599433
  • facebook-domain-verification=2whwanzrun4lwjdm0yek9dogs3lmy4
  • google-site-verification=qRLP748I2g1Kj0RpkHBXkrvEF07keGJfZ6d8Nn5wX_8
  • openai-domain-verification=dv-pLiStirHxLZvlRorsSTYwoLC
  • v=spf1 a mx include:spf.tld.pl include:spf.protection.outlook.com ip4:94.152.136.116 ip4:84.39.196.7 ip4:94.152.136.118 -all
  • v=DMARC1;p=reject;pct=100;rua=mailto:a3976726@mxtoolbox.dmarc-report.com,mailto:dmarc@xkompl.uriports.com; ruf=mailto:a3976726@forensics.dmarc-report.com,mailto:dmarc@xkompl.uriports.com
  • 41ad8ce16b41ef38d0ddf221d6a41e62fb462993f9f5b279d63289fba26ab564
  • 41ad8ce16b41ef38d0ddf221d6a41e62fb462993f9f5b279d63289fba26ab564

NS 2

  • alice.ns.cloudflare.com
  • matt.ns.cloudflare.com

SOA 1

  • alice.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (3)

Common NameIssuerExpires
al.to C=US, O=Google Trust Services, CN=WE1 Sun, 13 Sep 2026 16:25:06 +0000
WE1 C=US, O=Google Trust Services LLC, CN=GTS Root R4 Tue, 20 Feb 2029 14:00:00 +0000
GTS Root R4 C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for al.to. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for al.to <a href="https://domaindrift.io/t/al.to"> <img src="https://domaindrift.io/badge/al.to.svg" width="300" height="64" alt="DomainDrift signed observations for al.to"> </a>

Ed25519 Receipt

Receipt ID
rcpt_dd0ed5304006cf37
Output Hash
b091c48b958a37621f9708a560351496a9c9632683d5632adccf8a1dc6bae23d
Signature
ed25519:c1b7cb2ce5d8ad8f28cbbd107bb110f5e7c2446fa1303dc870b0d7fa9e95cb9b90efdf82cdba31f34eebbb3036d49ba798ce77f5e05fbb0a9ff1a15f37062d06
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser